Comments (2)
Getting a feel for the kinds of things that are broken for user namespaces.
Some upstream tests are just flat out wrong and do not work when userns is enabled because of incorrect assumptions.
Found that userns=host is also problematic because when userns is enabled, moby chown's all image files to the remapped root UID/GID... with userns=hsot
the user in the container is real root, but the file ownership is the garbage UID/GID that's used for for the private userns.
To fix this we'll like need to use a fuse fs to map the filesystem ownership on demand (similar to the solution I came up with to handle host bind mounts).
from container-upstream.
Abandoning this one for now, see the upstream tracking issue to follow along.
from container-upstream.
Related Issues (20)
- capz-azure-machinepool-master fails with "Waiting for condition" HOT 3
- Deployment failed in aks-engine-azure-disk-vmas HOT 6
- dualstack-azure-e2e is flaky HOT 2
- add a generic support doc
- Update loadbalancer code to respect ipFamilies on service and create both ipv4/ipv6 LB entries HOT 1
- Add a generic image vulnerability scan and patch doc HOT 1
- [Windows] HostProcess base image HOT 4
- Automate generating conformance results for CAPZ certification HOT 5
- This repo is missing important files
- AKS Engine VHD Updates HOT 2
- [SMI] Traffic Metrics to beta milestone HOT 1
- [capz] Automate image building/publishing HOT 3
- [capz] Automate image building/publishing
- [capz] Automate image building/publishing
- [process] Create TOC definition and process
- [process] Add badge design and description page
- [smi] fix sdk bug with TCP Informer HOT 1
- [smi] build e2e demo for smi website HOT 2
- [kubectl] Implement azure auth module in external credential provider HOT 2
- Track work needed to migrate upstream Windows tests from aks-engine to CAPZ HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from container-upstream.